Coronavirus ‘Financial Relief’ Phishing Attacks Spike
A spate of phishing attacks have promised financial relief due to the coronavirus pandemic – but in reality swiped victims’ credentials, payment card data and more.
Lindsey O'Donnell
Two Zoom Zero-Day Flaws Uncovered
The zero-day Zoom flaws could give local, unprivileged attackers root privileges, and allow them to access victims’ microphone and camera.
Zoom Scrutinized As Security Woes Mount
The New York Attorney General has inquired about Zoom’s data security strategy, as the conferencing platform comes under heavy scrutiny for its privacy policies.
An informal Threatpost reader poll shows the majority of site visitors are privacy absolutists. But attitudes shift when the trade off is saving lives.
Zoom removed its Facebook SDK for iOS feature after a report found the app sending Facebook “unnecessary” user data.
The food container company’s main website had a card skimmer that scooped up online customers’ payment card data.
The router DNS hijacking attacks have targeted more than a thousand victims with the Oski info-stealing malware.
Apple’s security update included a slew of vulnerabilities in various components of iOS, macOS and Safari – the most severe of which could enable remote code execution.
Researchers say that APT41’s exploits are part of one of the broadest espionage campaigns they’ve seen from a Chinese-linked actor “in recent years.”
TrickBot victims are being fooled into downloading an app that records their screens – stealing non-SMS 2FA passcodes for banking websites.
